Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
File: 0760737E587C11EE8B2A0A2EC4F9AE02.roa (raw, json)
Hash identifier: wfItNbiJewrozCUj4fK5rArOenegRbTDZbm0h0xztls=
Subject key identifier: 9F:FB:92:B8:3C:55:9C:78:1B:B7:3A:AB:20:52:EF:C2:EA:CA:93:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E526
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:59:38 +0000
ROA not before: Sun 31 May 2026 16:59:38 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137125
IP address blocks: 27.48.0.0/22 maxlen: 22
27.48.4.0/22 maxlen: 22
27.48.8.0/22 maxlen: 22
27.48.12.0/22 maxlen: 22
27.48.16.0/22 maxlen: 22
27.48.20.0/22 maxlen: 22
27.48.24.0/22 maxlen: 22
27.48.28.0/22 maxlen: 22
27.48.32.0/22 maxlen: 22
27.48.36.0/22 maxlen: 22
27.48.40.0/22 maxlen: 22
27.48.44.0/22 maxlen: 22
27.48.48.0/22 maxlen: 22
27.48.52.0/22 maxlen: 22
27.48.56.0/22 maxlen: 22
27.48.60.0/22 maxlen: 22
27.48.64.0/22 maxlen: 22
27.48.68.0/22 maxlen: 22
27.48.72.0/22 maxlen: 22
27.48.76.0/22 maxlen: 22
27.48.80.0/22 maxlen: 22
27.48.84.0/22 maxlen: 22
27.48.88.0/22 maxlen: 22
27.48.92.0/22 maxlen: 22
27.48.96.0/22 maxlen: 22
27.48.100.0/22 maxlen: 22
27.48.104.0/22 maxlen: 22
27.48.108.0/22 maxlen: 22
27.48.112.0/22 maxlen: 22
27.48.116.0/22 maxlen: 22
27.48.120.0/22 maxlen: 22
27.48.124.0/22 maxlen: 22
27.48.128.0/22 maxlen: 22
27.48.132.0/22 maxlen: 22
27.48.136.0/22 maxlen: 22
27.48.140.0/22 maxlen: 22
27.48.144.0/21 maxlen: 22
27.48.152.0/22 maxlen: 22
27.48.156.0/22 maxlen: 22
27.48.160.0/20 maxlen: 20
27.48.160.0/22 maxlen: 22
27.48.164.0/22 maxlen: 22
27.48.168.0/22 maxlen: 22
27.48.172.0/22 maxlen: 22
27.48.176.0/22 maxlen: 22
27.48.180.0/22 maxlen: 22
27.48.184.0/22 maxlen: 22
27.48.188.0/22 maxlen: 22
27.48.192.0/22 maxlen: 22
27.48.196.0/22 maxlen: 22
27.48.200.0/22 maxlen: 22
27.48.204.0/22 maxlen: 22
27.48.208.0/22 maxlen: 22
27.48.212.0/22 maxlen: 22
27.48.216.0/22 maxlen: 22
27.48.220.0/22 maxlen: 22
27.48.224.0/22 maxlen: 22
27.48.228.0/22 maxlen: 22
27.48.232.0/22 maxlen: 22
27.48.236.0/22 maxlen: 22
27.48.240.0/22 maxlen: 22
27.48.244.0/22 maxlen: 22
27.48.248.0/22 maxlen: 22
27.48.252.0/22 maxlen: 22
103.112.24.0/22 maxlen: 24
122.50.128.0/18 maxlen: 24
122.50.192.0/18 maxlen: 24
202.62.224.0/20 maxlen: 24
202.137.208.0/20 maxlen: 24
203.98.96.0/19 maxlen: 24
2404:c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58662 (0xe526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:59:38 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c68fa-e85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:1a:d1:a6:7e:72:46:c4:25:d1:06:d7:09:
ff:54:a4:f5:28:12:64:86:4e:20:f6:44:61:f3:5d:
28:5d:c6:63:40:9d:1c:d9:6e:fc:95:7d:86:3f:75:
9f:46:5a:37:0b:a8:08:89:47:d6:8d:29:c1:55:7e:
6f:c6:c2:e0:21:d6:ff:e3:8f:7c:fe:5a:98:8f:44:
e0:37:72:83:5e:59:dd:d2:3f:58:92:a4:b6:77:16:
0e:11:73:68:d0:5b:9a:fa:9e:5e:f3:98:1e:64:25:
db:7f:de:6b:23:bc:5d:96:ea:de:d3:ad:f2:6f:e9:
bf:b7:92:e0:9e:21:3f:07:64:e3:cf:2e:12:ac:fe:
49:66:ae:a4:38:0b:34:a7:2a:ff:23:23:40:34:ff:
c0:db:5c:ca:d2:ba:e2:44:7d:13:ad:bb:fb:6c:f7:
8c:cc:d9:07:3b:0d:f4:db:d9:c2:67:13:46:82:c9:
1e:f4:10:06:d3:c8:32:a3:6a:d7:71:0d:c4:4c:a7:
a4:f7:7c:0d:e8:9f:d3:5b:3a:2e:62:a6:f2:eb:1c:
e5:bd:a8:61:66:8e:6c:0a:bc:62:2f:14:d6:a3:88:
51:cd:a9:04:c3:5d:f9:e1:c9:0f:55:1c:5e:e8:c3:
1f:32:7e:05:c1:a2:ef:f2:f2:74:48:28:4c:14:41:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:92:B8:3C:55:9C:78:1B:B7:3A:AB:20:52:EF:C2:EA:CA:93:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.48.0.0/16
103.112.24.0/22
122.50.128.0/17
202.62.224.0/20
202.137.208.0/20
203.98.96.0/19
IPv6:
2404:c00::/32
Signature Algorithm: sha256WithRSAEncryption
4c:e4:cf:32:4e:83:21:af:39:f2:c2:a6:66:ae:94:ca:38:9c:
af:dd:62:de:d5:45:a7:10:5a:6e:65:a9:91:61:ff:3d:3a:66:
51:76:55:83:c9:9e:55:86:14:14:f0:8a:a1:63:f2:ff:e5:85:
72:48:72:38:78:2a:dd:40:b8:31:92:ba:60:16:9d:53:bb:9c:
21:37:05:a2:7d:60:2f:df:ec:22:76:67:dc:3b:0e:ea:1c:e8:
34:14:34:9d:aa:ee:e7:65:87:25:61:c5:39:22:f4:6f:bd:4b:
20:13:9e:f0:f5:b8:d3:8a:7a:1a:d5:45:4f:55:50:7c:43:7b:
b6:3e:53:62:b2:1b:c1:15:98:fa:38:1c:75:b2:aa:3d:81:91:
2b:85:49:dd:83:f9:74:04:d4:12:9e:52:d4:bd:fb:fd:0b:4b:
2f:20:07:bc:32:14:ba:c6:7c:88:f8:aa:07:b0:3c:ef:1c:67:
8a:b0:d4:72:68:e2:70:99:11:32:06:7b:82:b8:84:34:8e:35:
f7:17:c7:1a:ad:e7:1a:23:2e:c9:b4:ef:c6:ab:ef:16:4e:ca:
bb:eb:4b:b2:d2:d7:4b:ea:a4:1c:63:8d:da:a8:23:c4:5a:cc:
83:e3:80:50:ff:70:cb:f1:75:39:a6:84:a1:33:fd:04:9c:20:
ed:e5:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:53 2026 by rpki-client